Privacy policy of ABONA Verwaltungs GmbH

ABONA Verwaltungs GmbH takes the protection of your personal data very seriously. For this reason, we will inform you here about the personal data we collect and how we treat it.

1. The name and address of the controller

The person responsible within the meaning of the Basic Data Protection Regulation and other applicable data protection laws of the member states of the European Union is

ABONA Verwaltungs GmbH
Heinrich-Blanc-Strasse 30 | 76646 Bruchsal Germany
Phone: 07251 9760-0
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Website: www.abona-erp.com

2. Name and address of data protection officer

Data protection officer for the processing of data is

Stephan Kuhn
Heinrich-Blanc-Strasse 30
76646 Bruchsal | Germany
Phone: 017642032645
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

Data subjects can contact our data protection officer directly at any time if they have any questions or suggestions regarding data protection.

3. Definitions of terms

A data protection declaration must clearly indicate how personal data is handled on the website. In order to guarantee this, we would like to explain the terms used in advance.

We use the following terms in this data protection declaration:

3.1 Personal Data

Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. IP address or cookies) or to one or more specific characteristics which express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

3.2 Processing

Processing means any operation carried out with or without the aid of automated procedures, or set of operations, relating to personal data. This basically includes any handling of personal data such as collection, storage, modification, use, transmission, dissemination, erasure or destruction etc..

3.3 Responsible person

The controller is a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. The data controller must ensure the permissibility of data processing through the use of technical and organisational measures that are regularly reviewed.

3.4 Pseudonymisation

Pseudonymisation means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.

3.5 Order processors

A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

3.6 Receiver

The recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party. However, authorities which may receive personal data in the course of a specific investigation task under Union law or the law of the Member States shall not be considered as recipients

3.7 Third parties

Third party means any natural or legal person, public authority, agency or any other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.

3.8 Consent

Consent is an expression of data protection self-determination. It is the voluntary expression of intention, in the specific case, in an informed and unequivocal manner, in the form of a statement or other clearly confirmatory act by which the data subject indicates his or her consent to the processing of personal data concerning him or her. Consent given may be withdrawn at any time.

4. General information on data processing

4.1 Scope of the collection of personal data

In general, we only collect data which we need for the provision of our services. The collection and use of your personal data is regularly only carried out with your consent or if the processing of the data is permitted by legal regulations.

4.2 On which legal basis we process your personal data

Paragraph 6 of the DSGVO provides for the processing of personal data only if certain conditions are met. This means that the processing of personal data is in principle unlawful, unless consent has been given or the processing is permitted by a legally regulated reason for permission.

If we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis.

Art. 6 para. 1 lit. b DSGVO serves as a legal basis for processing operations that are necessary for the fulfilment of a contract concluded between you and us or for the implementation of pre-contractual measures.

If the processing of personal data is necessary to fulfil a legal obligation to which we are subject, such as statutory storage and retrieval obligations, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.

Art. 6 para. 1 lit. d DSGVO is the legal basis in the event that vital interests of the data subject or another natural person necessitate the processing of personal data.

If the processing is necessary to safeguard our interests or the legitimate interests of a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the former, the processing of personal data is legitimised by Art. 6 para. 1 lit. f DSGVO.

4.3 Disclosure of your personal data to third parties and contract processors

In principle, your data will only be passed on to third parties with your express consent, unless it is a legal obligation which we must comply with.

In order to provide our network services, we make use of service providers who act within the framework of order processing on the basis of Art. 28 DSGVO.
This means that our contract processors are carefully selected and bound by our instructions.

4.4 Data transfer in third countries

The DSGVO guarantees an equally high level of data protection within the European Union. Accordingly, we only allow the transfer of your personal data to a third country if the requirements of Article 44 DSGVO are fulfilled.

To be more precise, this means that your data may only be processed if special guarantees exist.

4.5 Deletion of data and storage period

In accordance with the DSGVO, any personal data will be deleted as soon as the purpose for which it was collected no longer exists. Unless there are reasons for not deleting the data in accordance with Article 17 (3) DSGVO.

4.6 Existence of automated decision-making

We do without automatic decision making or profiling.

5. Rights of data subjects

If we process personal data from you, you are affected in the sense of the DSGVO. You are entitled to the following rights vis-à-vis us as the responsible party

5.1 Right to revoke a declaration of consent under data protection law

If the processing of personal data is based on a consent given by you, you have the right to revoke this consent at any time. This revocation will not affect the legality of the processing based on your consent.

5.2 Right to information

You have the right to information from us as to whether your data will be processed by us. If this is the case, you can request information about the following information:

• the purposes for which we process personal data;
• the categories of personal data that will be processed;
• the recipients or categories of recipients to  whom the personal data has been or will be disclosed;
• the planned retention period of your personal data;
• if the said data has not been collected from you, any available information about the origin of the data;

We will attempt to provide you with a copy of the personal data under processing within one month of receiving your written request for information.

5.3 Right to rectification

You have the right to have erroneous personal data corrected immediately.

5.4 Right to delete personal data

We are obliged to delete personal data immediately if one of the following reasons applies:

• Personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• They revoke the consent on which the processing was based and there is no other legal basis for the processing.
• You object to the processing and there are no overriding legitimate reasons for the processing or you object to the processing.
• The personal data have been processed unlawfully.
• The deletion of the personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States.

If the personal data concerning you has been made public by us, we are obliged in the event of the requested deletion, taking into account the available technologies and implementation costs, to take appropriate measures, also of a technical nature, to ensure the deletion of your data.

You do not have the right to deletion ("right to be forgotten") if processing is necessary:

• to exercise the right to freedom of expression and information;
• to comply with any legal obligation required by the law of the Union or the Member States to which we are subject, or to perform any task carried out in the public interest or in the exercise of official authority vested in us;
• for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 DSGVO;
• for archive purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DSGVO, insofar as the right to deletion presumably makes the realisation of the objectives of such processing impossible or seriously impairs them, or
• to assert, exercise or defend legal claims.

5.5 Right to limitation of processing

You have the right to demand that we restrict the processing of your personal data if one of the following conditions is met:

• You dispute the accuracy of the personal data concerning you for a period of time that allows us to verify the accuracy of the personal data;
• the processing is unlawful and you request the restriction of the use of personal data instead of deletion;
• we no longer need the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims, or
• You have lodged an objection against the processing as long as it is not yet certain whether our justified reasons outweigh your reasons.

If processing has been restricted in accordance with the above conditions, such personal data will be processed only with your consent or for the purpose of asserting, exercising or defending legal rights or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State, with the exception of their storage.

If the processing restriction has been limited in accordance with the above conditions, we will notify you before the restriction is lifted.

5.6 Right to data transferability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer such data to another controller without our interference, provided that the processing is based on consent or a contract and is carried out using automated procedures.

5.7 Right of objection

You have the right to object to the processing of your personal data at any time. We will then no longer process the personal data unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

If personal data are processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising. If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.

5.8 Right to complain to a supervisory authority

You have the right to complain to the supervisory authority if you are of the opinion that the processing or storage of your personal data violates the DSGVO.

6. Use of our online services

We only collect information from you which we need in order to make our online offer available.

6.1 Data collection when visiting our websites

As long as you use our website for information purposes only personal data is collected which is necessary for technical reasons to display our website and to guarantee stability and security.

The provider of the site processes information that your browser automatically transmits. These are

• Browser type and browser version
• used operating system
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address
• These data log files are expressly not stored.

The legal basis for data processing is Art. 6 Para. 1 lit. f) DSGVO. Our "interest" within the meaning of Art. 6 para. 1 lit. f) is the operation of this website and the implementation of the protection objectives of confidentiality, integrity and availability of data.

6.2 Use of Cookies

Our website uses cookies. This serves to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer by your browser.

Our cookies used are so-called "session cookies". They are automatically deleted at the end of your visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies which are necessary for the electronic communication process or for the provision of certain functions requested by you are stored on the basis of Art. 6 para. 1 lit. f DSGVO. As website operators, we have a justified interest in the storage of cookies for the technically error-free and optimised provision of our services. No cookies are stored which track your surfing behaviour.

7. E-mail

If you send us an e-mail, this data will be stored by us. These e-mails are archived by us and deleted after six years. The basis for this is Art. 17 para. 3 lit. b) DSGVO and Art. 6 para. 1 lit. f) DSGVO, whereby our interest is the fulfilment of statutory retention periods. Excluded from archiving: This email address is being protected from spambots. You need JavaScript enabled to view it. and This email address is being protected from spambots. You need JavaScript enabled to view it.

As an existing customer you can receive our free e-mail newsletter. These newsletters will only be sent with your consent. For this purpose we store your data as long as the subscription of the newsletter is active.

This processing of your data for the purpose of sending the newsletter requires your consent. In addition, you must confirm that you are aware of the data protection declaration. We use the double opt-in procedure in the registration process for this purpose. After successful registration, you will receive an e-mail in which you must click on a link to confirm your registration. In this way, we prevent unauthorized third parties from registering using your e-mail address. We log the registration process in order to be able to prove the process according to the legal requirements. The IP address of the calling terminal, date and time of registration are stored.

The data provided by you will be stored as long as the newsletter subscription is active. You can cancel your subscription at any time. For this purpose, each newsletter contains a corresponding unsubscribe link. This also enables you to revoke your consent. The legal basis for the processing of your data with given consent for the receipt of newsletters is Art. 6 para. 1 lit. a DSGVO.

You can object to this use of your data at any time by sending a message to the above-mentioned contact options or via the unsubscribe link in the advertising mail.

Our newsletters may contain so-called "tracking pixels", which are pixel-sized files that are retrieved from our server when the newsletter is opened. These pixel-code files do not contain any personal data and are only used for statistical purposes to determine whether and which links contained in the newsletters are clicked. This information cannot be assigned to individual newsletter recipients.

8. External links

Our online offer contains links to other websites. We have no influence on whether their operators comply with data protection regulations.

9. Online offers on social media platforms

We offer online services on various social media platforms in order to provide you with information and to get in touch with you.

We have no influence on the processing of personal data by the respective platform operator. As a rule, when you visit our social media services, the platform operator stores cookies in your browser, in which your usage behaviour or interests are stored for market research and advertising purposes. The user profiles obtained in this way - mostly across all devices - are used by the platform operators to display personalised advertising. Data processing may also affect persons who are not registered as users with the respective social media platform. Under certain circumstances, your data may be processed outside the European Union, which can make it more difficult to enforce your rights. When selecting such social media platforms, however, we make sure that the operators undertake to comply with the data protection standards of the EU.

The processing of your personal data when you visit one of our social media services is based on our legitimate interests in a diverse external presentation of our company and the use of an effective information opportunity as well as communication with you. The legal basis for this is Art. 6 para. 1 lit. f DSGVO. Under certain circumstances, you have also given a platform operator consent to data processing, in which case Art. 6 para. 1 lit. a DSGVO is the legal basis.

Detailed information on data processing in connection with the use of our social media services, opt-out options and the assertion of information rights can be obtained from the data protection declaration of the relevant platform operator.

9.1 Facebook

Supplier: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Data processing is based on an agreement on the joint processing of personal data pursuant to Art. 26 DSGVO. Privacy policy: https://www.facebook.com/about/privacy/ Opt-Out: https://www.facebook.com/settings?tab=ads

9.2 YouTube

Supplier: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy Policy: https://policies.google.com/privacy Opt-Out: https://adssettings.google.com/authenticated

9.3 Instagram

Supplier: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA
Privacy Policy: http://instagram.com/about/legal/privacy Opt-Out: http://instagram.com/about/legal/privacy

9.4 LinkedIn

Supplier: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Privacy Policy: https://www.linkedin.com/legal/privacy-policy Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

9.5 Xing

Supplier: XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany)
Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung

10. Children

Our offer is basically aimed at adults. Persons under the age of 16 may not transmit any personal data to us without the consent of their parents or legal guardians.

11. Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request including all personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6 Para. 1 lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.

In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a DSGVO) and/or on our legitimate interests (Art. 6 para. 1 lit. f DSGVO), as we have a legitimate interest in the effective processing of the enquiries addressed to us.

The data you send us via contact requests will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after the processing of your request has been completed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

12. Applications

We offer you the opportunity to apply to us (e.g. by e-mail, post or online application form). In the following we will inform you about the scope, purpose and use of your personal data collected during the application process.
We assure you that your data will be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated strictly confidentially.

12.1 Scope and purpose of data collection

If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as this is necessary for a decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-neu according to German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and - if you have given your consent - Art. 6 para. 1 lit. a DSGVO. Consent may be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in the processing of your application.

If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6 Para. 1 lit. b DSGVO for the purpose of carrying out the employment relationship.

12.2 Retention period of data

If we are unable to make you a job offer, you reject a job offer, withdraw your application, revoke your consent to data processing or request us to delete the data, the data transmitted by you including any remaining physical application documents will be stored for a maximum of 6 months after completion of the application process (retention period) in order to be able to trace the details of the application process in the event of discrepancies (Art. 6 Para. 1 lit. f DSGVO).

You may object to this storage if you have legitimate interests that outweigh our interests.

After expiry of the retention period, the data will be deleted unless there is a legal obligation to retain or any other legal reason for further storage.

If it is evident that the retention of your data will be necessary after the expiry of the retention period (e.g. due to an impending or pending legal dispute), deletion will only take place when the data has become irrelevant. Other legal storage obligations remain unaffected.

Translated with www.DeepL.com/Translator